$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a95fcad-3ba9-3214-858b-cd275ebf67ff.roa File: 1a95fcad-3ba9-3214-858b-cd275ebf67ff.roa (raw, json) Hash identifier: ZO1M84JOYwFtb3PuJQdwch+ppgsfBPZ6OAbFP91rBvM= Subject key identifier: AD:B1:C4:79:78:8A:10:B3:5A:E7:9C:72:87:E9:E4:60:4F:B4:01:58 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584A86DBF8541D407397DBAC8344 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a95fcad-3ba9-3214-858b-cd275ebf67ff.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 396982 IP address blocks: 34.68.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:f8:54:1d:40:73:97:db:ac:83:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=1edf7b3e-2723-4dc7-aa6f-8738dafdafea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f5:59:ed:21:fd:de:d1:59:0a:a4:df:54:67: bc:5d:c4:69:82:d4:5f:4a:db:ba:1a:94:f1:4c:06: 36:50:5c:4b:f5:cf:d8:51:4e:c7:04:a9:d2:43:58: 13:dc:b1:6e:c5:34:fe:30:94:2b:57:75:87:a4:ea: 25:22:c2:32:3f:4f:36:44:dc:bc:00:ed:4e:d5:71: fa:be:85:f3:d6:0d:9c:f9:6b:1f:a9:90:d4:b6:a9: e8:34:ae:63:dd:89:f5:80:96:50:e4:0c:d4:f0:9c: f9:0b:9f:bf:f4:76:4c:d8:d9:24:5e:20:f3:8e:cc: 06:fb:2a:30:3c:ac:04:36:f8:31:3e:cf:5a:b4:90: 47:74:54:eb:1c:4c:32:67:fe:23:39:3c:74:57:20: b3:68:9c:7e:a5:a9:36:fe:3d:53:f2:89:2a:3e:24: b4:2b:84:65:df:89:3c:77:d9:f3:49:96:f3:3e:da: 67:1e:27:7f:2a:80:0a:16:cc:00:eb:3a:3f:7a:62: 60:ba:96:a6:7b:82:10:be:08:09:c3:17:90:a6:99: fc:7f:75:ae:e4:56:f1:2a:36:75:eb:81:90:81:5a: 04:ef:24:6a:d4:a4:a4:15:3c:49:0d:24:b7:62:79: 1f:d5:c9:e2:18:db:02:6e:39:12:f8:64:1a:36:e5: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B1:C4:79:78:8A:10:B3:5A:E7:9C:72:87:E9:E4:60:4F:B4:01:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1a95fcad-3ba9-3214-858b-cd275ebf67ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 34.68.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:84:8b:f9:2a:b8:7d:c8:c8:15:8d:0a:3a:94:10:14:b2:0b: a7:c3:20:c5:a8:78:a4:7a:e3:e1:20:a2:25:a3:99:0d:01:17: e8:4e:e1:41:85:2e:91:70:39:1b:a9:66:86:ee:0d:9a:9c:a8: 0f:59:86:fd:66:09:d7:b8:37:f1:a2:dd:5e:a6:69:ac:5f:c6: d5:8e:ed:50:e8:4d:71:ed:d0:0e:07:78:15:bb:4a:a4:6d:01: 49:40:a2:f7:1d:be:f4:9e:83:f4:57:be:d2:dd:42:59:ca:3d: aa:85:13:ca:3c:be:96:9a:16:fc:b0:4f:d9:ca:87:5c:cf:ab: d2:51:d4:a9:f1:b7:14:87:c7:e1:ca:a0:d5:1c:ae:88:29:d2: 37:dc:a5:7d:5b:1f:cb:f5:d1:f7:24:63:79:1b:68:67:5c:25: 02:57:06:92:f9:5a:01:0c:fa:3b:b6:36:fa:4c:61:84:56:4b: 43:72:06:4f:d7:46:ad:57:14:80:0f:e9:e3:90:28:41:a3:54: 53:da:da:c1:ca:01:c1:4e:bc:6b:4e:e9:6a:73:5e:b7:38:17: 54:59:97:57:4d:49:66:7f:25:3c:fd:7b:68:f0:63:44:50:d6: 26:43:bc:52:ce:b0:6e:04:49:26:1d:e3:9c:93:6e:35:82:fc: fe:e9:33:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG2/hUHUBzl9usg0QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk MWVkZjdiM2UtMjcyMy00ZGM3LWFhNmYtODczOGRhZmRhZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/VZ7SH93tFZCqTfVGe8XcRpgtRfStu6GpTx TAY2UFxL9c/YUU7HBKnSQ1gT3LFuxTT+MJQrV3WHpOolIsIyP082RNy8AO1O1XH6 voXz1g2c+WsfqZDUtqnoNK5j3Yn1gJZQ5AzU8Jz5C5+/9HZM2NkkXiDzjswG+yow PKwENvgxPs9atJBHdFTrHEwyZ/4jOTx0VyCzaJx+pak2/j1T8okqPiS0K4Rl34k8 d9nzSZbzPtpnHid/KoAKFswA6zo/emJgupame4IQvggJwxeQppn8f3Wu5FbxKjZ1 64GQgVoE7yRq1KSkFTxJDSS3Ynkf1cniGNsCbjkS+GQaNuXoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2xxHl4ihCzWueccofp5GBPtAFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWE5NWZjYWQtM2JhOS0z MjE0LTg1OGItY2QyNzVlYmY2N2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEIkTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqEi/kquH3IyBWNCjqUEBSyC6fDIMWoeKR64+EgoiWjmQ0BF+hO4UGF LpFwORupZobuDZqcqA9Zhv1mCde4N/Gi3V6maaxfxtWO7VDoTXHt0A4HeBW7SqRt AUlAovcdvvSeg/RXvtLdQlnKPaqFE8o8vpaaFvywT9nKh1zPq9JR1KnxtxSHx+HK oNUcrogp0jfcpX1bH8v10fckY3kbaGdcJQJXBpL5WgEM+ju2NvpMYYRWS0NyBk/X Rq1XFIAP6eOQKEGjVFPa2sHKAcFOvGtO6WpzXrc4F1RZl1dNSWZ/JTz9e2jwY0RQ 1iZDvFLOsG4ESSYd45yTbjWC/P7pM3A= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:30 2025 by rpki-client